Threats tagged 'ghsa-c73r-9gcf-qjwr'

A vulnerability in kube-compare allows execution of an untrusted container image's entrypoint when processing a 'container://' reference path. This flaw can lead to arbitrary code execution on the operator's workstation, potentially with elevated privileges if the Docker daemon runs with such rights. Red Hat OpenShift Container Platform 4.20.41 includes a security update addressing this issue.